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Abstract 

We establish the best possible approximation to a perfect quantum cloning 
machine which produces two clones out of a single input. We analyze both 
universal and state-dependent doners. The maximal fidelity of cloning is 
shown to be 5/6 for universal doners. It can be achieved either by a special 
unitary evolution or by a novel teleportation scheme. We construct the opti- 
mal state-dependent doners operating on any prescribed two non-orthogonal 
states, discuss their fidelities and the use of auxiliary physical resources in the 
process of cloning. The optimal universal doners permit us to derive a new 
upper bound on the quantum capacity of the depolarizing quantum channel. 
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I. INTRODUCTION 



A 1 — s> 2 quantum doner is a quantum mechanical machine that transforms a system 
described by some given pure state | ip) together with some prescribed state into two systems, 
each with a state as "close" as possible to the given one. Specifically, a quantum doner for 
qubits is defined by an input qubit | V') , a blank qubit | 0) , an ancillary system A in a state 
I X) (if necessary), and a unitary transformation U acting on all three of these, such that 

1^)1 0)1 X) — > \^) = U\ij)\0)\X), (1) 

and, after the interaction, the reduced density operators for the two qubits are identical — 
i.e., if pi = Tr2,A(|^) (^1) and p2 = Tri^yi(|\E') (\['|), then pi = p2- In general, ideal quantum 
doners (i.e., ones for which pi = P2 = do not exist: only if \ is assured to be 

drawn from a fixed orthogonal set can such a quantum doner be constructed This 
situation, however, leads naturally to the question, "How close to ideal can a doner be?" 
This can be explored both as a function of the sets from which the unknown state can be 
drawn and as a function of various notions of "closeness" to ideality. In this paper, we 
explore two such sets and optimality criteria. 

We define a universal 1 2 quantum doner as a quantum machine that takes as an 
input one qubit in a completely unknown quantum state | ip) and generates at the output 
two qubits such that each of them is in a state described by the reduced density operator of 
the form p = ri\ ip) {ip \ + {1 — rj)^!. The parameter rj describes the shrinking of the original 
Bloch vector s corresponding to the density operator \ip){ilj\, i.e. if \ip){ip\ = |(1 + s ■ (?) 
then p = ^{1 + rjs ■ a), where 1 is the 2x2 identity matrix and a represents the set of Pauli 
matrices. In this case, we shall be interested in the best possible doner with respect to the 
criterion of maximal rj — that is, maximal "local" fidelity F = {ip\p\ip) = |(1 + r^) between 
input and output. This case is important because it reveals the overall effectiveness with 
which purely quantum information — embodied in a completely unknown quantum state — 
can be copied. 
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In some cases the original qubit may be prepared in a state which is selected from a 
known ensemble of states. In such cases we can design a state- dependent doner which is 
optimal with respect to a given ensemble; here we will consider ensembles composed of only 
two non-orthogonal quantum states | a) and | b). Here the criterion of optimality is that of 
optimizing the "global fidelity" between input and output, i.e., to make the state | given 
in Eq. have the largest inner product possible with | a)| a) or \b)\b), depending upon the 
input state. This case is of some importance, for instance, because of the way it compares and 
contrasts to optimal eavesdropping schemes on two-state quantum cryptographic protocols 



The paper is organized as follows. In Section |II A| we discuss the performance of a uni- 
versal quantum doner, analyzing the role of the symmetry and isotropy conditions imposed 
on the system. The cloning transformation with the optimal "local" fidelity is derived by a 
constructive proof and is shown to coincide (modulo some phase factors) with the cloning ma- 
chine proposed by Buzek and Hillery 0. We then demonstrate in Section II B that universal 
quantum doners can also be implemented via quantum-state teleportation ||^ . This method 
results in the creation of two imperfect clones at two different locations by a combination of 
a shared three particle entanglement and public broadcasting. In Section ^ we relax the 
universality requirement and study state-dependent doners. We derive the optimal cloning 
transformations with respect to two-state input ensembles. We also comment on the role of 
state-dependent doners in quantum cryptography and show that the "local" and "global" 
fidelity criteria lead to distinct notions of cloning in the state-dependent case. Finally in 
Section IV, as an application of these results, we relate the optimality of universal doners 
to quantum channel capacity. All technical details of the optimality proofs are included in 
Appendix A (universal doners) and Appendix B (state-dependent doners). Appendix C 
details the calculations required to compare the optimal state-dependent doner to optimal 
eavesdropping in quantum cryptography 

Let us point out again that in this paper we restrict our discussion only to 1 ^ 2 doners. 
More general results will be presented elsewhere. 



II. UNIVERSAL QUANTUM CLONER 



In subsection |II A| we derive the unitary transformation with optimum fidehty for a uni- 



versal 1 — i> 2 quantum doner. We then show in subsection [II B| the possibility of establishing 
this cloning transformation via teleportation. 



A. Optimal universal quantum doner 

In this subsection we find the optimum fidelity for a quantum doner which is defined 
as a unitary transformation acting on two initial qubits (the one to be cloned in state | ip) 
(or = \ilj){tp\) and the second one in a standard state | 0)) and an auxiliary system, also 
referred to as ancilla. 

We will impose the following conditions on a universal quantum doner: 

I. pi = p2 Symmetry 

II. a) si = rj^s^ Orientation Invariance of Bloch vector 

II. b) F = Tr(p^pi) = const. Isotropy 
pi and p2 represent the reduced density operators of the two output qubits: 

Pi=Tr2,A[|*)(*|] (2) 

where | is the global state at the output of the doner and the partial trace is performed 
on the second copy and the ancilla's degrees of freedom, and analogously for p2. F is the 
fidelity of the doner. 

Let us comment on these three conditions: The first condition demands that the reduced 
density matrices of the two output states are the same. This is what we mean by symmetric 
cloning. 

The second condition requires that the Bloch vector of the original state ip does not 
change its direction but only its length: it shrinks by a factor rj^, indicating that the clones 
are not pure states, due to entanglement between themselves and the ancilla. 

The third condition requires that the doner treats every state in the same way, i.e. the 
fidelity and thus the reduction factor rj does not depend on the input vector. 
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We will see in the following that conditions II. a) and II. b) are not independent: if 
conditions I. and II. a) are satisfied II. b) holds automatically, i.e. symmetry plus orientation 
invariance implies isotropy. 

On the other hand we notice that any transformation on a qubit (i.e. on a Bloch vector) 
can be decomposed into a transversal (rotation) and a longitudinal (rescaling) part. By 
demanding that the doner treats all input states in the same way the Bloch vector of the 
original qubit can only be rescaled but not rotated, because a rotation has always two fixed 
points on the sphere ('hairy ball' theorem), so at least two states are transformed in a 
"special" way which contradicts the universality requirement. 

Thus for a symmetric doner the second and the third condition are equivalent. This is 
the reason that we called them II. a) and II. b). 

We start from a general ansatz for the unitary transformation U performed by the doner 
and acting on the total Hilbert space Ti^ = IH} ® IH? ® Ti.^, where x is the dimension of the 
Hilbert space for the ancilla states: 

U I 0)1 0)1 X) = a\ 00)1 A) + bi\ 01)1 fii) + h\ 10)| ^2) + c| 11)| C) (3) 
U I 1)1 0)1 X) = a| 11)1 i) + bi\ 10)1 5i) + 62I 01)1 ^2) + c| 00)1 C). (4) 

Here | X) denotes the initial state of the ancilla. Capital letters A,Bi,C, ... refer to output 
ancilla states. We have not specified the dimension of the ancilla, and we have not assumed 
any orthogonality relation to hold between \A),\ Bi), ... . The only condition we are imposing 
on \A),\ Bi), ... is that they are normalized. In this way we do not restrict our argument 
leading to the optimum doner to a certain dimension of the Hilbert space of the ancilla. 
From this general ansatz we can also draw conclusions about the existence of symmetric and 
isotropic quantum cloning without ancilla which are discussed in Section |III A . 



Due to the unitarity of the cloning transformation, the coefficients a, 6j,c, which are 
in general complex, must satisfy the normalization conditions 



1 a p + 
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c\' = l 


(5) 



and the orthogonality condition 

a*c{A \C) + h*MB2 + ITMB^ l^a) + c*~a{C \A) = 0. 



(6) 



We now impose the constraints I and II to satisfy the symmetry and the isotropy proper- 
ties. We define the free phases for the coefficients as a = | a le**^", a = \ a |e*'^'^ and analogously 
for the other coefficients. /^From imposing the symmetry condition we find that our ansatz 
(3), (El) has to fulfill the following relations: 



I ^1 1 = I ^2 1 ; I &i I = I &2 1 



(7) 



and 



ah\{B^\ A) + c%2{C\ B2) = abl{B2\ A) + c*h{C\ B^) 

and the same as Eq. (|^) for the tilded coefficients and ancilla states. Moreover, 

hla{Bi\ A) + a*bi{A\ Bi) = bla{B2\ A) + 0*62(^1 B2) 
h\c{Bi\ C) + c*W{C\ 5i) = hlc{B2\ C) + c*h2{C\ B2) . 



(8) 



(9) 



We will call | &i | = | &2 | = | & | and | &i | = | &2 | = | & | from now on. 

Let us now look into the constraints following from imposing condition II. a). Orientation 
invariance of the Bloch vector s means that all its components shrink by the same ratio t]^: 

Six ^ly ^li 



(10) 



^i^x ^^y ^^z 

Using the unitary transformation (^,(^ and imposing condition (^) we find the following 
constraints: 



(i) 


a 


2 _ 


c 


ii) 


a 


2 _ 


c 



Re 



6*a(fii \ A) +d,*bi{A\Bi) 



(ui) Im 



6*a(5i \ A) + h*h{A\Bi) 



(iv) blc{Bi\C) + c*bi{C\Bi) ^0 

(v) b*XB2\A) + c*h{C\Bi) ^0 

(vi) bla{B2 \A) + c*bi{C \Bi) = 

(vii) c*a{C \A) - a*c{A \C) = 
and (1 ^ 2) 

Here the notation (1^2) indicates that as a resuh of the symmetry condition the same set 
of constraints has to hold for exchange of the indices 1 and 2. 

Inserting constraints (i) and (vii) into the exphcit form for the ratio r)^ we find easily 
that 1]^ is a constant, i.e. independent of the input state. Thus, as mentioned before, we find 
that conditions II. a) and Il.b) are not independent: after imposing condition I, condition 
Il.b) is automatically satisfied when II. a) holds. Therefore, any symmetric doner which does 
not rotate the initial state is isotropic. 

The explicit form of the reduction factor rj is 

77=|a|2-|c|^ (11) 
which we want to maximize. The fidelity 

F = Tr{p,\ I) = i(l + si ■ s^), (12) 
which for the symmetric isotropic doner is related to the reduction factor as 

F=l{i + n), (13) 

is maximized as well. 

The maximization of the fidelity is carried out using the Lagrange multiplier method, 
which takes into account the constraints imposed on the cloning transformation due to 
the unitarity, symmetry and isotropy conditions. Here we have also required the unitary 
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transformation to be symmetric under exchange | 0) ^ 1 1) which leads to \a \ = |a|,|6| = 
|6|,|c| = |c|. The exphcit optimization procedure is reported in Appendix 

The idea is to use the Lagrange muhipher technique and some knowledge about the 
coefficients a and bi to find the best value for | c | . Then we use constraint (ii) to find the 
optimum value of | a | which gives us | 6 | via the normalization condition. 

The results are 

IcI = 



a 



IM^/i. (14) 

Here |c| = can be understood intuitively because c is the coefficient for the state 1 11) 
which is maximally remote from the ideal output state | 00) in Eq. (|^). 

Thus we find that the shrinking factor r] of the optimum symmetric isotropic doner is 

V = \. (15) 
corresponding to the optimum cloning fidelity 

F^\. (16) 

As shown in appendix ^ the class of unitary transformations for the optimal symmetric 
and isotropic doner is given by 

U I 0)1 0)1 X) = 00)1 A) + ^e^^^d 01) + 1 10)) | A^) (17) 

U 1 1)1 0)1 X) = y|e^^^| 11)1 A^) + y^e^^'^d 01) + | 10)) | A) (18) 

where (A |A_l) = 0. 

We can realize this transformation with two-dimensional ancilla states, e.g. \A) = | 0), 
I A±) = I 1), or any other orientation of | A). These possibilities are different from each other 
with respect to the reduced density matrix of the ancilla qubit. If we choose 6a = Sa = 
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and I A) = I 0) we arrive at the cloning transformation proposed by Buzek and Hillery , 
one example for the optimum symmetric and isotropic doner. 

As the requirements for the scalar products of the ancilla states for the optimum doner 
can be met by using ancilla states of dimension two there is no better doner using higher 
dimensional ancillas. 

We note that maximizing the global fidelity, defined by Fg = Tr[(p^ p,/,)pi,2] where 
pi,2 denotes the total output density matrix, traced over the ancilla, leads to the same 
transformations (|17|) and ([T8|). 



B. Universal cloning by teleportation 

So far we viewed the doner as a machine which clones quantum states at a given location. 
There are, however, certain scenarios, especially in quantum communication and cryptog- 
raphy, where cloning is followed by further processing which may involve sending the two 
clones to two different locations. In these scenarios one may benefit from "non-local" cloning 
which can be achieved via teleportation. 

Suppose that a sender (Alice) is to transmit an imperfect copy of her qubit state to two 
receivers (Bob and Charlie); the three parties possess as a starting resource a particular 
entangled quantum state, but otherwise only classical communication is permitted from 
Alice to Bob and Charlie. This situation is essentially the three-party generalization of the 
well-known teleportation protocol 0, in which Alice can transmit any qubit state to Bob 
perfectly, provided that they share an entangled singlet state | = :^(|01) — |10)). In 
this protocol, Alice first performs a joint measurement of the state to be teleported {tp) and 
her half of the singlet pair, the measurement being performed in the Bell basis 

l^=^) = ^(|oi)±|io)) ^^g^ 
l<f^) = ^(|oo)±|ii)). 

Alice then sends a two-bit message to Bob indicating which of the four Bell states was 
measured. Bob can reconstitute exactly from his half of the singlet if he performs the 
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final action: if lie receives the message nothing; if rotate his qubit by cr^; if 

"<l>~", rotate by o"^; if "$+", rotate by ay. 

The same protocol, but applied to the particular three-particle state 

I ^done) = ^|100) - ^1010) - y||001) (20) 

results precisely in a Buzek-Hillery cloning from Alice to Bob and Charlie, provided that 
the results are averaged over the four possible measurement outcomes. (This averaging 
is not necessary in ordinary teleportation; we will explain in a moment what happens if 
the measurement outcomes are not averaged over in the present form of teleportation.) In 
I ^done), the first particle is possessed by Alice, the second by Bob, and the third by Charlie. 
(Of course, the state is symmetric with respect to Bob and Charlie.) The cloning is achieved 
by classical transmission in the sense that Alice need only broadcast the two-bit result of 
her Bell measurement to Bob and Charlie, with which they perform the same final action 
as in teleportation, in order for Bob and Charlie to possess Buzek-Hillery clones of Alice's 
original qubit state. 

It is informative to formulate our imperfect teleportation in the language of quantum 
operations with which Nielsen and Caves have analyzed ordinary teleportation |T^. In this 



language the transformation from Alice's input state and Bob's (or Charlie's) output state 
pI conditional upon measurement outcome i (unnormalized) is specified by the superoperator 

pl = J2A,p^Al (21) 
j 

The output density operator po taking all measurement outcomes into account just requires 
the sum over all outcomes i: 

Po = Y.^ijPi'^\r (22) 



Completeness requires 



E4,A = 1' (23) 
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but if the sum is restricted to a particular i, 



(24) 



where Ei is the operator representing the measurement outcome i in the positive-operator- 
valued theory of quantum measurement. 

This representation may be related simply to the Bloch- vector picture. If we write the 
conditional output density operator as = ^^2(1 + •^'o • <?), where Pr(i) is the probability 
of measurement outcome i, then 

Pr(i) = \l^Ei + i s^aTr{Eia^) (25) 

a 

and 

Pr{t)sop = iTr(^^,,-4a^) + i ^ s^,Tr(^^,,a«4a;3). (26) 
j " i 

A straightforward calculation shows that for our imperfect teleportation, the and $~ 
measurement outcomes are indistinguishable (i.e., are described by the same A operators, 
and therefore have the same probability of occurrence and leave the output qubit in the 
identical state). This is also true of the and outcomes. But the $ and ^' measure- 
ments are distinct. This is by contrast to perfect teleportation in which all four measurement 
outcomes lead to identical operations (just the trivial noiseless identity operator, in fact). 
For our case we find 



1 1 








U 




2 






V 6 






V 













(27) 
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^1 


0^ 




/T 

V 6 
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1^ 




1 

^ ) 














.° 





and 



E. 



'^1/3 0^ 



2/3 



E-q, 



2/3 
[0 1/3) 



(28) 
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We note from Eq. ( pTl) that the teleportation operation, keeping only the cases where the 
measurement outcome is a $, resembles in some ways a "decay channel", in which the state 
is damped towards the |l)-state fixed point. The cases where the measurement outcome is 
\1/ behave identically except with |0) and |1) interchanged (from which the isotropy of the 
measurement-averaged operation emerges). However, it is incorrect to say that the total 
operation is obtained by selecting at random between the channel" and the chan- 
nel" (although this is the way that fill] creates several interesting cloning transformations), 
because the Ei operators are not proportional to the identity as they are in perfect teleporta- 
tion. Unlike in the randomly-selected channel, the probability of the measurement outcome 
depends on the input state; we find directly from Eq. (^) that 

Pr($) = l/3(0|p^|0) + 2/3(l|p^|l), Pr(^) = 2/3(0|p^|0) + l/3(l|p^|l). (29) 

Finally we note that since the Bell measurements occupy a Hilbert space of at least two 
qubits |12[|, an open question is raised of whether good 1-to-A^ cloning can be achieved by 
teleportation through an + 1-particle entangled state. In the simplest generalization of 
the above protocol the extra Hilbert space size would still be two qubits (since there would 
still just be one Bell measurement); but the optimal 1-to-A^ doner appears to require an 
ancilla with 0{N) qubits fl^; as V. Buzek has pointed out, this may well mean that this 
teleportation approach to cloning may not generalize to other cloning problems. 

III. STATE-DEPENDENT QUANTUM CLONERS 

Let us start this section with showing that in order to satisfy the isotropy requirement 
an ancilla system must be necessarily involved in the cloning transformation. This is proved 
in subsection [111 A| . In subsection [HI B| we drop the isotropy condition and investigate the 



case of a symmetric state dependent doner in absence of ancilla. We will show that if we 
have some a priori knowledge about the input states the doner can perform much better 
than the optimal universal one. 
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A. Quantum doner without ancilla 



(i) 


a 


2 _ 


C 


ii) 


a 


2 _ 


c 



/^From the general ansatz for the unitary transformation with an ancilla of arbitrary 
dimension we can draw conclusions about a quantum doner without ancilla by replacing all 
states I A), \ Bi), ... on the RHS of (|^) and (^) with the factor 1. 

If we attempt to realize a symmetric and isotropic doner we need to be able to fulfill the 
constraints (i) to (vii) where all scalar products of auxiliary states have to be replaced by 1. 
We will show that this is not possible. 

Here we only write down those four constraints which we need for our argument: 

P = Re 6*a + d*bi 

(v) b*a + c*bi = 

(vi) b^a + c*bi = 

Remember that from (|^ we have | &i | = | 62 | = | ^ | and | 61 | = | 62 | = | & | • In order to fulfill 
constraints (v) and (vi) where both real and imaginary part of the given sum have to vanish 
there are only these possibihties (for any choice of phases 6a,Sbi, ■■.)■ 
{v)^\b\=0 or I a I = I c I (30) 

and 

(vi) '~-*|6| = or |a| = |c|. (31) 
There are four possible combinations of these constraints: 

• I a I = I c I and | a | = | c | 

• I a I = I c I and | 6 | = 

• I 6 I = and I a I = I c I 
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• I 6 I = and I 6 I = 

For the first three possibihties we find immediately from (i) and equation (pj]) that i] = 0, 
the trivial solution. For the last possibility we only need a glance at constraint (ii) to find 
?7 = as well. 

We thus conclude that it is impossible to build a symmetric isotropic quantum doner 
without ancilla. 



In this subsection we answer the following question: given two possible input states | a) 
and I b), where in general {a \b) ^ 0, what is the optimal quantum doner with respect to 
a "global fidelity" criterion? We suppose that the input qubit is prepared with the same 
probability either in state | a) or | b) and optimize the transformation as a function of their 
scalar product. The resulting optimal transformation will be therefore state-dependent. 

Two pure non-orthogonal states in a two-dimensional Hilbert space can be parameterized 
as follows: 



where {| 0), 1 1)} represents an orthonormal basis and 6 G [0, vr/4]. The set of the two input 
states can equivalently be specified by means of their scalar product S = {a\b) = sin 26'. 

Let us consider a unitary operator U acting on Ti.^ = IH? ® IH? and define the final states 
I a) and | /?) as 



B. Optimal state- dependent doner 



a) = cose\ 0) + sin6'| 1) 



b) = sin^lO) + COS0I 1) 



(32) 



a) = U\a)\0) 



(33) 



P) = U\b)\0). 



(34) 



Unitarity gives the following constraint on the scalar product of the final states: 



{a\p) = {a\b) = sin 20 = S. 



(35) 
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As a criterion for optimality of the state-dependent doner, we take the transformation 
that maximizes the global fidelity Fg of both final states | a) and | (3) with respect to the 
perfect cloned states | aa) = \a) ®\a) and \ hh) = | 6) ® | 6). The global fidelity is defined 



formally as 



^» 2 



U\{a\aa}\' + \{3\bb}f) ■ (36) 



We show in Appendix that the above fidelity is maximized when the states | a) and 
I f3) lie in the two-dimensional space 'Haa,bb which is spanned by vectors {| aa), | &&)}• 

Let us now maximize explicitly the value of the global fidelity (|36|). We can think about 
it in a geometrical way and define 0, 5 and 7 as the "angles" between vectors | aa) and | hh) , 
I aa) and | a), | a) and | [3) respectively. The global fidelity (|36| ) then takes the form 

= 1 (cos^ 5 + cos2(0 - 7 - <5)) (37) 

and is thus maximized when the angle between | aa) and | a) is equal to the angle between 
I hh) and | i.e. 5 = |(0 — 7). The optimal situation thus corresponds to the maximal 
symmetry in the disposition of the vectors. 

As we know that (j) = arccos(sin^ 2^) and from Eq. (^) 7 = arccos(sin 2^), after little 
algebra we can write the optimal global fidelity as 

1 



Fg^opt = 4 (^V 1 + sin^ 20VI + sin2^ + cos 2eVl - sm29j . (38) 

The corresponding unitary transformation U on the basis states | 00) and | 10) of the initial 
subspace of the four-dimensional Hilbert space of the two qubits is given by 

U\ 00) = a\ 00) + 6(1 01) + I 10)) + c| 11) (39) 
U\ 10) = c| 00) + 6(1 01) + 1 10)) + a\ 11) (40) 



where 



a = [cos 9{P + Q cos 29) - sin 9{P - Q cos 29)] (41) 

cos 29 

6 = -^—^P sin 2^(cos 9 - sin 9) (42) 
cos 29 

c = [cos 9{P - Q cos 29) - sin 9{P + Q cos 29)] . (43) 

COS 
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with 



P 



Q 



1 VI + sin 20 

2 Vl + sin"20 
1 VI - sin 29 



(44) 
(45) 



2 cos 29 

The transformation for | a) and | /3) can be readily derived from Eqs. ( p9D and (^). We can 
easily see that the transformation is symmetric, i.e. pa,i = Pa,2 = Pa for input state | a) and 
similarly for | b) . 

In order to compare the performance of the state-dependent doner with the universal 
one we calculate the "local" fidelity Fi of each of the output copies with respect to the input 
one, generally defined as 



Fi = Ti[pa\a) {a\] . 



(46) 



For the above transformation we find 



Fi,i - 2 

_ 1 
~ 2 



1 + 
1 + 



cos2 20 sin2 20(l + sin20) 



Vl + sin^ 29 
1 



sin^ 29 



(47) 



Due to the symmetry of the problem the same expression (^T]) is obtained for the fidelity of 
P/3 and it is plotted in Fig. |l]. As we can see, the fidelity takes surprisingly high values in 
the whole range of 9, well above the optimal value 5/6 of the universal doner. 

Let us now examine the degree of entanglement that our "quasi- cloning" transformation 
has introduced in the system. An estimation of the degree of purity of the state is given by 
the modulus of the s vector in the Bloch sphere: the modulus is maximized to unit when 
the state is pure. In the case under consideration it takes the form 



\ 



sin^ 20(1 + sin 20)2 cos^ 20 



(48) 



(1 + sin^ 20)2 1 + sin^ 20 

and is plotted in Fig. As we can see, the top of the vector s is always very close to the 
surface of the Bloch sphere for any value of and the degree of purity of the output state 
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is therefore always fairly high. Notice that the length of the Bloch vector is always much 
bigger than the value 2/3 of the optimal universal doner. 

We also point out that in this case the Bloch vector is not only shrunk but also rotated 
by a state-dependent angle -d, given by 

1 cos 26 



■(9 = arccos 



26 . (49) 



s \ Vl + sin^2^. 

Perhaps the most important practical use for state-dependent doners is in the eavesdrop- 
ping on some quantum cryptographic systems. For example, if the quantum key distribution 
protocol is based on two non-orthogonal states 0, the optimal state dependent doner can 
clone the qubit in transit between a sender and a receiver. The original qubit can then be 
re-sent to the receiver and the clone can stay with an eavesdropper who by measuring it 
can obtain some information about the bit value encoded in the original. The eavesdrop- 
per may consider storing the clone and delaying the actual measurement until any further 
public communication between the sender and the receiver takes place. This eavesdropping 



strategy, for instance, has been discussed recently in Ref. |TT . 

It should be noted, however, that eavesdropping via a direct cloning attempt is not 
the most advisable course of action for the eavesdropper if she wishes to be the most sur- 
reptitious. For that task, the eavesdropper's main concern is not in copying the quantum 
information — as embodied in the two non- orthogonal quantum states — but rather in op- 
timizing the tradeoff between the classical information made available to her versus the 
disturbance inflicted upon the original qubit [§0. The optimal solution to that problem 
leads to a one parameter class of unitary interactions, the parameter being the degree of 
disturbance. It turns out that, regardless of the value of the parameter, the optimal unitary 
interaction there never matches that given in Eqs. (|39|)-(^5D. 

Indeed this can be seen in a direct manner. The optimal eavesdropping strategy is 
quite similar to the scenario described above. The eavesdropper uses a probe system to 
interact with the in-transit qubit and then later performs a measurement on it (after all 
public discussion has ceased). Although it is not assumed, it turns out to be sufficient to 
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take the probe system itself to be a single qubit In general the final state of the 

probe will not be the same as that of the receiver's qubit: for instance, if the eavesdropper's 
available information is adjusted to vanish, then her probe will be left in its original state, 
which is completely independent of the sender's qubit's state. Nevertheless, in Appendix C 
it is shown that when the disturbance is adjusted so that the statistical distinguishability 
between the states of the eavesdropper's probe is identical to that of the final states of the 
receiver's qubit, then the optimal eavesdropping scheme is actually a quantum doner. In 
that case, the "local" fidelity between input and output works out to be 



1 ^f2 



Fi,2 = - + ^V(l - + + + (1 - ^2)^(1 + s){l - 5 + 352 + . (50) 



The difference between this fidelity and 1 in Eq. (|47|) is only slight — they differ at most by 
0.000651 when S = 0.579924, see Fig. — but this is enough to show that optimal cloning 
and optimal eavesdropping are two different tasks. 

Similar results can be obtained for the four states in the BB84 quantum cryptographic 
protocol |T^. Modifying the optimal eavesdropping scheme for that protocol in Ref. |T^ into 



a quantum cloning device as above gives a local fidelity of 0.854. Note that in the scenario 
of BB84 we can restrict the input of a cloning machine, therefore one would not want to use 
the universal Buzek-Hillery doner for the task of eavesdropping on BB84. 

A more intriguing point, however, can be gleaned from noting that actually for all S, 
Fi^2 > -^(,1- This implies that the optimal "global" quantum doner is not optimized with 
respect to the "local" fidelity criterion: in the state-dependent case, the two criteria differ. 
In fact, the state-dependent doner derived from optimal eavesdropping is still not the best 
with respect to the "local" fidelity criterion. For instance, in Appendix C it is shown that 
there is a still better state-dependent doner for this criterion; it gives rise to a local fidelity 
given by 

V2 



Fi^3 = - + ^(1 + S)[3-3S + Vl-25 + 952) V-1 + 2S + 352 + (1 - S)Vl-2S + 9S^. 

(51) 
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Again, the difference between Fi^^ and 2 is not large — the largest difference 0.001134 is 
attained when S = 1/2, see Fig. [1| — but it is enough to show that there are better doners 
out there with respect to the local fidelity criterion. We have verified that Fi^s is indeed 
the optimal local fidelity for a state-dependent doner as defined in ( pQ]) and ( ^OD but refrain 
from presenting the tedious calculations here. Ultimately, the disparity between Eqs. (^TD, 
(^) and (^TJ) only points out the subtlety of the concept of "copying" quantum information: 
given that it cannot be done ideally, there is no single sense in which it can be done in the 
best possible way. 

Finally, let us note that in this subsection we have always considered qubits for the 
purpose of illustration, but we stress that the results hold for an arbitrary dimension of the 
input states. In this case we can rephrase our arguments in terms of the two-dimensional 
subspace spanned by the two input states and choose the same parametrization as given in 
Eq. (|32D for the input states in such subspace. We can then derive the same conclusions as 
above. 

IV. APPLICATION TO QUANTUM CAPACITY 

The optimal universal doners, e.g. the Buzek-Hillery doner, permit us to establish a new 
upper bound on the quantum capacity of a depolarizing qubit channel. A simple (1 — rj)- 
depolarizing channel transmits a quantum state whose Bloch vector is shrunk by r/, as above. 
The quantum capacity Q{r]) is the maximum rate at which k qubits can be coded into n 
qubits in such a way that the k qubits can be recovered with high fidelity by the receiver, 
in the limit of k and n going to infinity. We can show that 

Q = o,v<l 

Qiv)<l-H,(^^V + ^yv>^ (52) 

where H2{x) = — xloggX — {1 — x) log2(l — x) is the binary entropy function. 

The second part of Eq. is proved in [T^JT^ . The proof of Q = for 77 = | follows 
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from the universal cloning results above. Suppose the opposite, Q{ri = |) > 0; Sec. IV of 
T8| shows that this cannot be so: Consider the Buzek-Hillery doner inserted into a three 



party Alice-Bob-Charlie communications protocol discussed above in Sec. [11 B| . If Bob and 
Charlie were oblivious to each other's existence, they could both, by experiments conducted 
in concert with Alice, establish that the Alice-Bob channel and the Alice-Charlie channel 
are both simple depolarizing channels with depolarization fractions '7 = |- If(5(|)>0 this 
would mean that Alice could, with suitable encoding, transmit a state to Bob and Charlie, 
both of whom could successfully decode it and obtain a high-fidelity copy of it. But this 
violates the no-cloning theorem for quantum states fl]]; thus, it must be so that = 0. 
Q = for < I follows from the non- decreasing (as a function of rj) property of If a 
lower 1] gave a higher Q then Alice could add noise herself to the signal thereby turning a 
high-r] channel into the supposedly better lower-?] channel. 

The bound given in (p2D is discontinuous at = |. If we made the seemingly natural 
assumption that Q is a continuous function of 1], as is the channel capacity in the classical 
setting, then we can apply the methods introduced in |TB[ to show that Q < 3r] — 2 for r] > |. 
This would improve on ( p2D for a range of rjs near |. Unfortunately, the continuity of Q has 
proved suprisingly difficult to establish rigorously; this has finally been established for 
a particular channel, the quantum erasure channel. The fact that the Buzek-Hillery doner 
is proved to be optimal shows that no stronger bound on Q for the depolarizing channel 
can be established by this reasoning, and in fact no upper bound with a lower threshold is 
known, although there is also no evidence that the capacity of Eq. ([5^) can be attained. 
Thus this remains one of the many open questions in quantum information theory. 
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APPENDIX A: OPTIMIZATION FOR UNIVERSAL CLONER 

We want to maximize the function rj while the constraints (i) to (vii) as well as the 
unitarity constraints (|^) and (^) are fulfilled. The independent variables are the absolute 
values of the coefficients a,bi, their phases, the absolute values of the scalar products of 
the ancilla states (2 of these are already fixed via the symmetry condition (0)) and their 
phases which we notate as 

{A \C) = \{A\C)\- e'^^^ (Al) 

and accordingly for the other scalar products. 

We impose the natural symmetry requirement on the general ansatz that the reduced 
density matrix of the two clones should not change under the exchange | 0) ^ 1 1), i.e. the 
outcome should not depend on renaming the basis. This leads us immediately to 

|a| = |a|; |6j| = |6j|; |c| = |c| (A2) 

and the following restrictions for the scalar products of ancilla states from off-diagonal 
density matrix elements: 

\{A\B,)\ = \{A\B,)\; \{B,\C)\ = \{B,\C)\; \ {C \A) \ = \ {C \A) \ . (A3) 

We also find that the phases ^AB^j^BiCy^cA '^^^ ^e expressed as functions of the phases 
^ABp^B.c'^CA and 5a, ... . 
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We are using the method of Lagrange multiphers where we have to solve the system of 
equations 

o\a\ ~{ o\a\ 



1,...13 



(A4) 



where 



r/ = 2|a|2 + 2|6p-l , 



(A5) 



(Pi denotes the constraints, and the Lagrange multiphers are Aj. The order of the constraints 
which defines the Lagrange multiplier indices in later equations is taken to be 



^1 

<^2 



aP + 2|6r + |c 



bla{Bi \A) + 5,*bi{A\Bi) 



2|ap + 2|6p-l-Re 
LP3 = Im [bla{Bi \A) + a*bi{A \Bi) 
(^4 = blc{B^\C)+c*bi{C\B,) 
^5 = bla{B2\A) + c*bi{C\Bi) 
= bld{B2\A) +d*bi{C\Bi) 
= 5*a{C\A) -a*c{A\C) 
ips = a*d{A \C) + b;h{B2 + blh{B^ IB^) + c*d{C \A) 



and ipg^ 



10,11,12,13 



V52,3,4,5,6 with (1 ^ 2) 



(A6) 



In solving this system of equations we can use some knowledge about the coefficients: 
We know from constraint (ii) and equation ( [A^ ) that both | a \ and | b \ can not take the 
value 0, because otherwise rj = 0, the trivial solution. 
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Taking the partial derivative with respect to | c | leads to 



2Ai|c| + A4 [ble'''{Bi\C) +bie-''^{C\Bi) 
+ All [b*2e'^HB2\ C) + h2e-'^^{C\ B2) 
+ X,he'''^{C\ B,) + \i2h2e-''^{C\ B2) 
+ A6&ie-^'^(C'| 5i) + Ai362e-'''^(C'| B2) 
+ 2Xsa*e'^^{A\C) = 



(A7) 



where we have already eliminated {A \ C) by inserting Lp-j = Q into (p^. From the deriva- 
tives with respect to | {B,\ C) |, | {C\ B,) |, | {C\ Bi) |, | {C\ Bi) \ and | {A\ C) \ we arrive (after 
dividing through phase factors) at 



A, 



cl = 



with j = 4,5,6,11,12,13 



(A8) 



and 



As I a I I c I = 



(A9) 



After multiplying Eq. ( [A^ ) with | c | we find 



Ai ■ IcP = 



(AlO) 



In the same way we use the equations resulting from differentiating with respect to | a | , 
I (5,1 A) I, I (i| S,) I, I (S,| A) I, I (5,1 A) I and | {A\ C) \ and get 



21 a I + All a I + 2A2I a I + 2A9I a I = 



(All) 



Multiplying this with |cp and using Eq. (|A10|) we conclude that, since \a \ 7^ 0, either 
A2 + Ag = — 1 or I c I = 0. 

We will now show that A2 + A9 = —1 corresponds to a minimum of 77, i.e. 77 = 0. From the 
derivatives with respect to | {Bi \ A) \ and | (i?2| A) \ we find after dividing through | a || 6 |: 



- A2 cos((5a - + 5^^^) + A3 sin((5a - + 5^^^) = 
-Ag cos((5a - 6-^^ + 5^^^) + Aio sm{5a - + 5^^j^) = 
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(A12) 
(A13) 



and from the derivatives with respect to Sj^_^^ and S^^j^: 

A2I (fill A) I sin(5, - 5-,^ + 5^_J + A3I m A) I cos(5, - 5-,^ + 5^^^) = (A14) 
A9I W A) I sin(5„ - 6^^ + 6^^^) + Aiol W A) \ cos(5, - 6^^ + 6^^^) = . (A15) 

If A2 + Ag = —1 then at least one of these two multiphers is not equal to zero. Let us assume 
that A2 7^ 0. We multiply Eq. ( |A12| ) by cos(5a — + 5^ia)' obtaining 



A3 cos{6a - + 6^^^) sm{6a - + 6^^^) = A2 cos^{6a - + 6^^^). 



(A16) 



Substituting Eq. (|A16|) into Eq. ( |A14| ) multiplied by sin(5a — 6i_^ + 5^^^) we obtain 
A2I {Bi\ A)\ = 0, so that 

{Bi\A) = if cy^ . (A17) 
The same reasoning in which tilded and untilded variables are interchanged leads to 

(i| Bi) = if c ^ . (A18) 

Due to constraint (ii) this means rj = 0. 

If the assumption A2 7^ does not hold then Ag 7^ and the same line of arguments leads 
to (^21 A) = {A\ B2) = and also r] = 0. 

We have thus established | c | = 0, and therefore 77 = | a p. 

We also notice that from ip^, (pu and ipQ, ipi^ we need 



{B,\A) = {B,\A) = 



(A19) 



Now 7] is maximized by maximizing | a \ which can be easily achieved using constraint 
fii) and the normalization condition: 



ii) a p = Re 


'bla{Bi \A) +h*bi{A\Bi) 






= a 


• 1 6 1 ■ Re 


'e''~^'^-\\B, \A) + e"-^'^-^^\A \B,) 




= a 








(A20) 
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or 



l«P = l-^. (A21) 

So, I a 1^ is maximized for the maximum value of which is = 2^. This leads to 

|a| = /|; IH = /i. (A22) 
We can meet the maximum of ^ by choosing 

{A\Bi)^l- {Bi\A)^l (A23) 

and 

5, = ; 5a = 5,, . (A24) 

Collecting our information about the coefficients and scalar products the class of optimal 
unitary transformations is given by 

U I 0)1 0)1 X) = ^e*^''! 00) M) + y|e^^-(| 01) + 1 10)) M^) (A25) 

U 1 1)1 0)1 X) = y|e^^^| 11)1 A^) + ^e^^il 01) + 1 10))| A) (A26) 

where {A \A±) = 0. 

APPENDIX B: OPTIMIZATION FOR STATE-DEPENDENT CLONER 

Let us assume that | a) and | /?) have some contribution which does not lie in 7iaa,bb- 
Then we can write explicitly the form of | a) and | /3) 

\a) ^ ao\aa) + bo\bb) + Co\Co) (Bl) 
\i3) = ai\aa) + bi\bb) +ci\Ci) (B2) 

where vectors | Co) and | Ci) are normalized and lie in the subspace orthogonal to 7iaa,bb- 
The unitarity of the transformation imposes the following constraints 
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(^1 = Re[a*ai + + ^'(a*6i + 6*ai) + c*ci(Co| Ci)] - ^ = (B3) 

(^2 = Im[a*ai + + S^a^h + 6*ai) + c*Ci(Co| Ci)] = (B4) 

¥^3 = |ao|' + l&ol' + 2S^Re[albo] + |coP -1 = (B5) 

^4 = |aip + + 2S^Re[albi] + \c,\^ - 1 = , (B6) 



where S is defined in Eq. 

The global fidelity is given by 



F, = U\ao + boS'\' + \h + a,S'\'). (B7) 



Inserting constraints 993 and (p^ into Eq. ( pTl) yields 

1 



2-(l-S')(|ai|^ + |()„|')-(|c„|^+|c,|') . (B8) 



We can now use the method of Lagrange multipliers for the remaining two constraints, which 
gives the following system of equations 

d\ao\ ^ ' d\ao\ 
d\bo\ ^ d\bo\ 



Let us concentrate on the equations where we differentiate with respect to the parameters 
Co, ci and (Co| Ci). Without loss of generality, we can consider cq and (Co| Ci) real, while ci 
must be taken in general complex (ci = |ci|e*''). The corresponding equations (obtained by 
differentiating with respect to cq, |ci| and (Co| Ci) respectively) give 

-Co + AiRe[|ci|e''^(Co| C,)] + A2lm[|ci|e^^(Co| C,)] = (B9) 
-I ci I + AiRe[coe*^(Co| Ci)] + A2lm[coe*^(Co| Ci)] = (BIO) 
AiRe[co|ci|e^^] + A2lm[co|ci|e^^] = (Bll) 
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After multiplying Eqs. (|B9| ) by cq, (piO|) by | ci | and ( |B11| ) by (Co| Ci) and inserting the 
last equation into the other two we find Cq = |ci| = 0. We can therefore conclude that | a) 
and 1 13) lie in Haafib- 

APPENDIX C: STATE-DEPENDENT CLONERS FROM EAVESDROPPING 

We take as our starting point for these calculations the development in Refs. |g] and 
just at the point where the eavesdropper's probe is restricted to consist of a single qubit. 
I.e., we take sin A = in those references. This leaves a two-parameter family of unitary 
interactions to be considered. (Note: We shall interchange the symbols a and 9 used in 
Refs. |§] and so as to be consistent with the notation of the present paper.) 

With this much given, suppose we label the receiver's state for his qubit after the eaves- 
dropping interaction by or p^, depending upon whether the sender sent state | a) or \ h). 
Similarly suppose we label the eavesdropper's probe states by or pf . Then, we have from 
Eqs. (86)-(91) and Eqs. (98)-(100) of Ref. 0] that the matrix elements for these operators 
will be: 

(Pa)oo = ^(l + cos20cos20) (CI) 
[pDq^ = 1 (^(cos 9 - sin 9f sin 2(0 - a) + (cos 9 + sin 9f sin 2(0 + a)) (C2) 
(Pa)ii = ^(l-cos2^cos20) . (C3) 

and 

(Pa)oo = cos^6' cos^a + sin^6' sin^a (C4) 

(Pa )oi = cos 9 sin 9 sin 20 cos 2a + - cos 20 sin 2a (C5) 

(Pq )ii = sin^6' cos^a + cos^6' sin^a . (C6) 

Hermiticity determines the remainder of the matrix elements. The matrix elements for pf 
and p^ are given by the same expressions except with cos 9 and sin 9 interchanged. With this 
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interaction, the fidelity between the sender's and receiver's states — i.e., 1 — D in Eq. (33) of 
Ref. and 1 - D{U) in Eq. (101) of Ref. 0— is given by 

F(a,0)^(aK|a) = (6K|6) (C7) 

1 1 
= cos^a + -S'cos20sin2a — -5*^(1 — sin 20) cos2a . (C8) 

Now, it is shown in Refs. ||^ and ^ that if this interaction is to be one for optimizing 
the tradeoff between the eavesdropper's information and the fidehty between the sender's 
and receiver's quantum states, then a and must satisfy the relation 

S* cos 20 ,^ . 

tan 2a = — . C9 

1 — S^[l — sm20) 

(See Eq. (52) in Ref. ^ and Eq. (108) in Ref. ||^.) On the other hand, in order for the optimal 
eavesdropping solution to also be a quantum doner, it must be the case that = and 
Pb — Pb- ^ little algebra applied to Eqs. (|ClD-(|C^) shows that this can occur only when 
cos 20 = cos 2a. Hence, if there is not to be an inconsistency with the constraint given by 
Eq. ( |C9|) , then it must be the case that the parameter x = sin 20 is such that it satisfies, 

{S + S^)x^ + {1-S^)x-S = 0. (CIO) 



Solving this quadratic equation and inserting the result into Eq. ([Cq ) gives the fidelity Fi^2 
of Eq. (13). 

As stated in Section III.B, this discussion can be expanded to produce a quantum doner 
still better with respect to the "local" fidelity criterion than the one just found. It is this: 
we simply set = a in the interaction above and ignore the constraint Eq. ( |C9| ) that the 
interaction lead to optimal eavesdropping. With this, Eq. (|C8|) reduces to 



F(0) = i + i(l + ^)((l-^)cos20+issin40) . (Cll) 

This expression is maximized when 

sin20 = ^(-1 + 5 + Vl- 25 + 952) . (C12) 

Inserting this particular value for sin 20 into Eq. ( |C11| ) gives the expression Fi^^ reported in 
Eq. (|TD. 
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FIGURES 
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0.2 0.4 0.6 

d 

FIG. 1. Local fidelity of the state-dependent doner as function of 9: the solid line results from 
maximization of the global fidelity, see eq. (|47|), the dashed line corresponds to the local fidelity 
in the optimal eavesdropping scheme, given in eq. (|50|), and the dotted line is the optimal local 
fidelity, see eq. (|5l|). 
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